< Back to situation

[REVISION HISTORY]

Zalo messaging application security and data management

Updated 2 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-02 04:23 UTC → 2026-10-27 03:02 UTC · added removed

Information regarding the Zalo messaging application has focused on user security and data management. Initial reports highlighted cybersecurity risks, warning users of signs that their accounts may be under remote surveillance. Indicators of unauthorized access include sudden logouts, notifications of access from unfamiliar devices or IP addresses, and unexpected requests to synchronize message history. Recent updates have expanded on these indicators, noting that users may observe messages appearing as ‘read’ before being opened, or messages being deleted or recalled unexpectedly. Users are also advised to monitor the account’s active device list for unrecognized hardware. Because Zalo accounts frequently contain sensitive information, such as work communications, identification documents, and banking details, they are considered frequent targets for scammers. If an account is compromised, unauthorized users may utilize the platform to send malicious links or fraudulent loan requests to the victim's contacts. To manage security, users are encouraged to use the ‘Account and Security’ section within the app to identify and log out unrecognized devices. Subsequent information addressed data loss and recovery, noting that users may be able to recover deleted messages, images, and videos if backups exist. Data loss is often attributed to logging into new devices, reaching storage limits, or the use of third-party cleaning software. Newer guidance from the Hue City Police emphasizes responding to automated security alerts such as ‘Are you the one logging in?’ or ‘Did you just log in?’. If these prompts are unrecognized, users should select ‘Security Check’, then ‘Not me’, and utilize ‘Block now’ or ‘Log out immediately’ to secure the account. Risks often stem from failing to log out of public devices, losing access to registered contact information, or interacting with malicious links.

Versions

  1. 2026-10-27 03:02 UTC Zalo messaging application security and data management
  2. 2026-10-02 04:23 UTC Zalo messaging application security and data management
  3. 2026-09-19 12:23 UTC Zalo messaging application security and data management

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.